Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7971c2d6-d2af-472b-98c6-136e8edc0890.roa
File: 7971c2d6-d2af-472b-98c6-136e8edc0890.roa (raw, json)
Hash identifier: YrTtwFfXlE0H1YAXzLYoTrvZXAKRqKy1/GJvY7zJ3Tw=
Subject key identifier: 39:A3:70:48:80:A3:39:77:8E:1B:95:53:D5:D8:82:D8:F7:67:98:36
Certificate issuer: /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial: 287A840DF57D59FD73BF1C858B449262D69D237D
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7971c2d6-d2af-472b-98c6-136e8edc0890.roa
Signing time: Fri 13 Dec 2024 00:00:00 +0000
ROA not before: Fri 13 Dec 2024 00:00:00 +0000
ROA not after: Fri 17 Jan 2025 23:59:59 +0000
asID: 14618
IP address blocks: 51.156.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:7a:84:0d:f5:7d:59:fd:73:bf:1c:85:8b:44:92:62:d6:9d:23:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Validity
Not Before: Dec 13 00:00:00 2024 GMT
Not After : Jan 17 23:59:59 2025 GMT
Subject: serialNumber=709e1a6cea86b74983b0d002d9f254810196fcce2f67469ae65d072b5c9dcb21, CN=c336411a-6651-4f13-8ef9-de681c7c9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:c5:62:66:9b:3e:db:40:a8:9d:29:a6:ed:
81:cf:b3:6f:a8:f5:ca:c0:6e:2a:b6:15:89:28:96:
42:05:87:65:aa:94:b7:e4:58:10:b7:0b:7c:cc:7f:
05:c7:bd:11:47:d9:2d:a8:1e:33:b0:f5:66:58:b4:
e9:34:71:16:40:aa:28:9b:eb:4e:f5:97:6a:18:1a:
ab:ca:e5:6c:57:5a:2e:11:a9:23:94:47:58:f5:13:
1c:c7:95:76:e2:66:cf:35:ba:ce:fb:3d:32:6b:fd:
07:e4:c9:0d:5b:ee:92:71:a0:fe:10:f6:c9:33:3b:
a7:7b:6e:ba:e8:bc:af:be:74:e3:25:ff:b8:f8:e5:
0f:2e:84:a7:63:4d:75:dd:9c:53:56:26:96:91:65:
5b:bc:ac:c6:e2:dc:ad:a6:f5:aa:a7:ba:ff:29:ea:
11:e9:a6:e0:fc:62:68:ca:67:15:0a:84:8e:72:b9:
d5:e5:53:50:df:ec:54:74:10:08:19:5a:40:72:61:
a7:78:f2:74:db:e8:3e:26:f0:cd:96:6d:a1:a7:51:
9f:f9:b9:40:57:67:fa:ca:1d:75:0c:b6:cf:be:bd:
1e:4c:f9:77:ab:a5:cf:37:7f:e4:6a:2a:aa:35:97:
1a:98:eb:65:6e:d3:05:92:cc:d8:b3:5c:d7:2e:b7:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A3:70:48:80:A3:39:77:8E:1B:95:53:D5:D8:82:D8:F7:67:98:36
X509v3 Authority Key Identifier:
keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/7971c2d6-d2af-472b-98c6-136e8edc0890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.156.0.0/15
Signature Algorithm: sha256WithRSAEncryption
90:a4:d4:6a:ca:f4:ce:dd:e2:e4:27:8d:e4:e3:d4:d9:f3:d5:
05:bc:31:86:20:dd:24:22:f9:24:db:f8:61:91:cf:a9:2c:24:
8f:05:f0:ca:44:a4:f8:a7:cf:5b:da:33:bf:01:19:5b:bc:09:
e1:ae:2b:0b:4c:1c:3d:71:f5:ea:38:ce:64:6e:32:97:b0:0c:
a9:e5:9e:bf:36:ea:f7:af:e2:2a:e4:74:a4:08:b2:3a:f0:c9:
8a:d8:34:d3:26:b1:cd:e1:da:ce:9e:6d:90:c5:34:88:85:42:
c2:ae:29:eb:0d:34:df:b8:5f:e7:72:49:6e:a7:40:14:ba:49:
d5:12:c1:77:70:29:27:84:c1:df:82:2d:e1:38:2f:21:73:29:
f4:e2:82:3f:38:b5:3e:51:28:81:bd:c6:95:dc:0d:fe:fc:07:
81:16:9c:e6:92:e0:69:89:21:0e:86:4f:b8:07:78:2c:f5:2d:
cb:f7:40:5b:05:ab:bf:e5:37:48:a3:d6:6f:0e:29:40:92:b3:
8b:96:d4:6a:f2:49:2b:5c:32:84:ee:8d:31:5e:b9:94:12:24:
9a:92:5b:2c:e1:03:e2:0c:b9:92:51:0b:ee:84:c9:08:87:1f:
85:fe:c4:b5:4e:aa:88:91:41:e5:ab:2f:ef:c1:31:b1:92:d5:
fd:b7:e8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:16 2024 by rpki-client on console.sobornost.net